Privacy Policy for Hushbean
Effective date and last updated: November 2, 2026
1. Who We Are
Hushbean (the "app") is made by Atlas Labs (the "Company", "we"), a business in the Republic of Korea. We decide how the information described here is processed. You can reach us at support@atlaslabsstudio.com. The short version: your recordings, your results and your check-in answers stay on your iPhone and are never sent to us. If you agree, the app also sends us usage data about which parts of it are used. You can say no, or change your mind at any time, and every feature works either way.
2. What Stays on Your iPhone
The app processes the following only on your iPhone. None of it is sent to us or to anyone else, and we cannot see, access or recover it. Audio — The app uses the microphone only while the sleep tracker is running. The recording is analysed on your iPhone; once a night has been analysed, the full recording is deleted and only short clips of the sounds it found are kept so that you can listen to them. Results — Grinding and snoring found in your nights, weekly reports, habit comparisons and tries Check-ins — Your answers about caffeine, alcohol, stress, meals, symptoms and similar questions, and your answers during setup Settings — Such as your bedtime and reminder Like the data of any app, this information is included in your iPhone's own backups if you have turned on iCloud Backup or back up to a computer. Those backups are made by your iPhone under your Apple account and are not sent to us. There is no account. We never receive your name, email address, phone number, Apple ID or contact details, unless you choose to email us (see Article 8).
3. Usage Data — Only If You Agree
During setup, the app asks whether you want to share usage data. Nothing is sent, and no identifier is created, until you say yes. You can change your answer at any time in Me → Privacy → Share usage data. If you say yes, the app sends: Usage — Which screens are opened and which buttons are used, for example "a recording was started" or "a weekly report was viewed", and counts such as how many nights have been recorded Errors — Crash reports and error details (the type of error and where in the app's code it happened) Technical information — App version and build, iOS version, iPhone model, language and region setting, time zone, screen size and whether the connection is Wi-Fi or mobile data Random identifier — A random ID created on your iPhone when you say yes, so that events from the same installation can be counted together It never sends audio or clips; grinding, snoring or any other result; any check-in or setup answer; which goals, habits or tries you chose; how long or when you slept; or your location. The random ID is not linked to your name, your Apple ID, your device's advertising identifier or any other account, and we do not try to find out who you are. It is still a pseudonymous identifier, so we treat usage data as personal information. Deleting the app deletes the ID, and turning sharing off and on again creates a new one. Your IP address reaches our analytics provider's servers as part of any internet connection. It is discarded when an event arrives; it is not stored and is not used to work out your location.
4. Why We Use It, and on What Basis
We use usage data only to find and fix errors and to understand which parts of the app are used, so that we can improve it. The legal basis is your consent (for example, GDPR and UK GDPR Article 6(1)(a), the EU ePrivacy rules and UK PECR, and Article 15(1)(1) of Korea's Personal Information Protection Act). Giving it is optional: if you say no, nothing changes in the app. You can withdraw it at any time in Me → Privacy, which stops further sending; it does not affect what was sent before. We do not use any information for advertising or marketing, do not sell it, do not share it for cross-context behavioural advertising, do not combine it with data from other companies, do not track you across other apps or websites, and do not make automated decisions about you.
5. Who Receives It
Usage data is processed for us by one service provider: PostHog Inc. — Product analytics and error reports — data stored in the European Union (Frankfurt, Germany) — privacy@posthog.com PostHog processes it only on our instructions, under a data processing agreement that requires it to protect the data at least as well as this policy does. Its sub-processors are listed at posthog.com/subprocessors. We do not provide information to any other third party, except where the law requires us to.
6. Transfers Outside Korea
If you agree to share usage data, it is transferred out of the Republic of Korea as follows. Recipient — PostHog Inc. (privacy@posthog.com) Country — Germany (European Union), where the data is stored; PostHog Inc. is a United States company and may access it from there, with safeguards set out in its data processing agreement Items — The usage data, technical information and random identifier in Article 3 When and how — Sent over an encrypted connection while you use the app Purpose — Finding and fixing errors and improving the app Retention — As in Article 7 You can refuse the transfer by saying no during setup or by turning off Me → Privacy → Share usage data. Refusing has no effect on the app's features.
7. How Long We Keep It
On your iPhone — Until you delete the night, or delete the app Usage data — 12 months from when it is sent, after which our analytics provider deletes it automatically Emails — Until your question is resolved, and no longer than three years When a retention period ends, the information is deleted electronically in a way that cannot be recovered.
8. Email
If you email us at support@atlaslabsstudio.com, we receive your email address and whatever you write, and use them only to reply. The feedback email the app prepares includes the app version, iOS version and iPhone model, and nothing about your nights; you can remove these before sending.
9. Your Choices and Rights
Delete a night at any time from Me → Storage. Deleting the app deletes everything it stored on your iPhone, including the random ID. Stop usage data at any time in Me → Privacy → Share usage data. Depending on where you live, you may have the right to access, correct, delete, restrict or receive a copy of your personal information, to object to its processing, and to withdraw consent. To use any of these rights, write to support@atlaslabsstudio.com; we reply within 30 days at the latest (45 days where Washington or Nevada law applies). Because usage data is not linked to your name, we may need your help to find the records that are yours. You will not be treated differently for using your rights. You also have the right to complain to a data protection authority (see Article 15).
10. Consumer Health Data (Washington, Nevada and Connecticut)
Because Hushbean is about sleep and teeth grinding, residents of Washington, Nevada and Connecticut have specific rights over consumer health data. See our Consumer Health Data Privacy Policy at atlaslabsstudio.com/hushbean/consumer-health-data.
11. Children
Hushbean is not directed at children under 13, or under 14 in the Republic of Korea, and we do not knowingly collect information from them. If you believe a child has shared usage data, write to us and we will delete what we can identify.
12. Security
Your recordings and results stay on your iPhone, protected by its own security, such as your passcode and data protection. Usage data is encrypted in transit, stored by our provider in the European Union, and access to it is limited to the people who need it to run the app.
13. Medical Disclaimer
Hushbean is a wellness tool, not a medical device; it does not diagnose or treat any condition. Talk to a dentist or doctor before making any decision about your health.
14. Changes
If this policy changes, we will update the date above. For significant changes, we will tell you in the app, and where a change needs your consent, we will ask for it again.
15. Contact and Complaints
Privacy officer — The Representative of Atlas Labs, support@atlaslabsstudio.com If you are not satisfied with our answer, you can contact: Republic of Korea — Personal Information Infringement Report Center (KISA) — privacy.kisa.or.kr — 118 Republic of Korea — Personal Information Dispute Mediation Committee — kopico.go.kr — 1833-6972 European Union — The data protection authority of your country — edpb.europa.eu United Kingdom — Information Commissioner's Office — ico.org.uk Canada — Office of the Privacy Commissioner of Canada — priv.gc.ca Australia — Office of the Australian Information Commissioner — oaic.gov.au